Tuesday, October 30, 2012

Tale of a Man Who Bought Details of 1.1 Million Facebook Users for $5

Facebook SearchHow protective are you of your information?

Many of us share our contact information, current location and everyday thoughts on our Facebook profile without ever considering the possibility of that data ending up in the wrong hands.

Even more alarming is how easily said data can be collected and sold to anyone that’s willing to pay. The sales price doesn't have to be high, either.

As Bulgarian blogger and digital rights activist Bogomil Shopov recently discovered, a handy $5 can fetch the information tied to 1.1 million Facebook users.

According to his blog, Shopov purchased the list containing Facebook names, user IDs, email addresses, and vanity URLs from someone off Gigbucks for $5. In the description, the seller wrote that the data had been collected through Facebook apps, only included active users, and had great potential for anyone looking to offer a social media product or service. Spammers could also find this list useful, of course.

Shortly after making his purchase, Shopov was contacted by Facebook and instructed to send them the file, give them all the purchase details, disclose whether or not he’d shared it with anyone else, and promptly delete any copies he had. Oh, and don’t tell anyone what happened. We see how that went.

After conducting an investigation, Facebook determined that the information was collected by scraping public information and not through an app as the data seller claimed.

There was a bit of doubt that the information was scraped and not app-provided given that Shopov said that some of the email addresses he checked were not publicly displayed; however, it’s possible that the email addresses were visible at some point.

So what should we take from all of this? Well, if you’re a Facebook user, you should definitely:

  • Make sure your privacy settings are configured correctly (aka nothing is "public") to minimize the chances of your personal information being scraped from your profile.

  • Pay attention to what apps you install on your Facebook profile and ultimately give unlimited access to your information.


Failure to lock down your Facebook profile could lead to your data being sold, email address being added to a spammer's mailing list, or maybe even the loss of your job.

[via Forbes]

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

Monday, October 29, 2012

Hurricane Sandy to Bring Strong Winds, Flooding Rains and... Internet Scams?

Hurricane Sandy PathHurricane Sandy is bringing a lot to the table: 90+mph winds, heavy rain, floods, and even a foot or three of snow in certain areas.

While those within the storm’s path have taken the necessary precautions to protect their family & homes, there are dangers that will pose danger to those who are far beyond the storm’s designated area.

“If the past repeats itself, Facebook postings, tweets, emails, and websites claiming to have exclusive video or pleading for donations for disaster relief efforts will appear shortly after the storm hits,” Deborah Salmi of Avast! Antivirus warned in a Monday blog post. “These messages often include malicious code that attempt to infect computers with viruses, spyware, or Trojan horses.”

It's true. Cybercriminals often use major news events – such as natural disasters or celebrity deaths – to lure users to malicious sites rigged with drive-by-downloads serving malware or phishing scams to steal personal/financial information.

The more tenacious scammers may even part-take in what’s referred to as “black-hat SEO” (search engine optimization) to help their booby-trapped websites appear near the top of search engine rankings.

Don't Fall Victim to Hurricane Sandy Scams


Users are advised to follow these tips to avoid falling for Hurricane Sandy internet scams:

  • Be wary of unsolicited emails that urge you to download files or click links to view pictures of the disaster area. There’s a pretty good chance that the attached file will contain malware and embedded links lead to malicious websites.

  • Do not respond to unsolicited emails asking for donations to relief efforts. If you want to make a donation to help those affected by Hurricane Sandy, go directly to the website of the charity you wish to donate to. You can also review BBB ratings to make sure you are contributing to a legitimate cause.

  • If you're making a donation online, always double-check the URL in your browser's address bar before supplying any personal or financial information.

  • Keep in mind that the majority of legitimate charity websites end in .org versus .com.

  • Use a URL expander to investigate shortened URLS before following them.

  • Proceed with caution when searching for disaster videos; cybercriminals often create fake video pages that ask you to download malware disguised as an Adobe Flash plugin/update. (Hint: You can use the Adobe website to verify you have the latest version of Flash installed in your browser.)


Did we leave any tips off the list? Feel free to share your words of wisdom the comment section below.

Stay safe, everyone!

Update: Hurricane Sandy Spam Has Arrived!

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

Thursday, October 25, 2012

Buy of the Week: Microsoft Windows 8 Pro (64-bit) for $142!

Windows 8 ProIt's Windows re-imagined and reinvented from a solid core of Windows 7 speed and reliability. It's a touch interface. It's a Windows for devices. And it's easy to try now - whether you're installing it for the first time, or moving from Windows 8 consumer preview.

Until November 2nd, 2012, you can order Windows 8 Pro (64-bit) from Hyphenet for only $142, plus shipping!

Specifications for Windows 8 Pro (64-bit)





























Operating SystemMicrosoft Windows 8 Pro
License TypeLicense and media
License Qty1 PC
License Details64-bit
LanguageEnglish
MediaDVD-ROM

Call (619) 325-0990 to order Windows 8 Pro (64-bit) today!


Buy of the Week offer valid through November 2nd, 2012.

Note: Shipping and taxes apply.

Need a different version of Windows 8? Contact us for pricing!

Looking for something else? Check out our monthly deals or contact us to get a quote on the product you're searching for.

Wednesday, October 24, 2012

Trojan Tags Along in "Your UPS Invoice is Ready" Spam

UPS LogoSpammers are once again sending out fake UPS notices in hopes of tricking recipients into downloading malware onto their computer.

The emails, titled “Your UPS Invoice is Ready” have spoofed headers to make it appear as though it came from a ups.com email address and urge the user to download the attached file to view and pay their new UPS invoice.

UPS Spam
From: UPSBilling (RosannahColleen4g@ups.com)
Subject: Your UPS Invoice is Ready

UPS

This is an automatically generated email. Please do not reply to this email address.

Dear UPS Customer,

New invoice(s) are available for the consolidated payment plan(s) / account(s) enrolled in the UPS Billing Center
Please view UPS Billing Center attach document to view and pay your invoice.

(c) 2012 United Parcel Service of America, Inc. UPS, the UPS brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.

For more information on UPS's privacy practices, refer to the UPS Privacy Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply message.
For questions or comments, visit Contact UPS.

This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.

Don't be fooled, though. The attached file (“UPS document.zip”) contains a variant of the Win32/Injector.XYG Trojan, not a copy of your UPS invoice. So do NOT download or open it!

Instead, it is recommended that you:

  • Report the email to UPS by forwarding the email and its full headers to fraud@ups.com.

  • Delete the email immediately.


Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

Hackers Hit Barnes & Noble, Steal Credit Card Data

Barnes & NoblesIf you have recently made a purchase at Barnes & Nobles, you will want to closely monitor billing statements if you used a credit card or change your PIN number if you paid using debit.

Barnes & Noble announced on Wednesday that hackers had broken into PIN pad devices used in 63 of its stores, resulting in the theft of credit card information, debit card information and debit card PIN numbers for anyone that swiped their debit/credit card when making a purchase.

Purchased made online or through NOOK mobile apps were not affected by this breach, and Barnes & Nobles stated that their customer database is secure. The breach is limited to the single PIN pad device tampered with in each of the affected stores.

Barnes & Noble has been working with federal law enforcement authorities to investigate the breach, along with banks and payment card companies to identify any accounts that may have been compromised and beef up security to prevent fraud.

All PIN pad devices were disconnected following discovery of the breach on September 14th, and the company stated that customers can securely shop with credit cards through their cash registers.

Tampered devices were discovered at the following locations:



































































































































































































































































































































































































Store AddressCityStateZip
4735 Commons WayCalabasasCA91302
2470 Tuscany Street Suite 101CoronaCA92881
2015 Birch Road Suite 700Chula VistaCA91915
313 Corte Madera Town CenterCorte MaderaCA94925
5604 Bay StreetEmeryvilleCA94608
810 West Valley ParkwayEscondidoCA92025
1315 E. Gladstone StreetGlendoraCA91740
5183 Montclair Plaza LaneMontclairCA91763
894 Marsh St Bldg GSan Luis ObispoCA93401
2615 Vista WayOceansideCA92054
72-840 Highway 111 Suite 425Palm DesertCA92260
27460 West Lugonia AveRedlandsCA92374
1150 El Camino Real Space 277San BrunoCA94066
10775 Westview ParkwaySan DiegoCA92126
3600 Stevens Creek BlvdSan JoseCA95117
11 West Hillsdale Blvd.San MateoCA94403
9938 Mission Gorge RoadSanteeCA92071
40570 Winchester RdTemeculaCA92591
4820 Telephone RoadVenturaCA93003
1149 S. Main St.Walnut CreekCA94596
470 Universal Drive NorthNorth HavenCT06473
100 Greyrock Place Suite H009StamfordCT06901
60 Isham RoadW. HartfordCT06107
18711 NE Biscayne BlvdAventuraFL33180
333 N. Congress AvenueBoynton BeachFL33436
152 Miracle MileCoral GablesFL33134
1900 W International SpdwayDaytona BeachFL32114
2051 N. Federal HighwayFort LauderdaleFL33305
12405 N Kendall DriveMiamiFL33186
11380 Legacy AvePalm Beach GardensFL33410
14572 SW 5th St Suite 10140Pembroke PinesFL33027
11820 Pines BlvdPembroke PinesFL33026
5701 Sunset Drive Suite 196S. MiamiFL33143
700 Rosemary Ave Unit #104West Palm BeachFL33401
1441 West Webster AvenueChicagoIL60614
1130 North State StreetChicagoIL60610
5380 Route 14Crystal LakeIL60014
20600 North Rand RoadDeer ParkIL60010
728 North Waukegan RoadDeerfieldIL60015
1630 Sherman AvenueEvanstonIL60201
1468 Springhill Mall BlvdW. DundeeIL60118
170 Boylston StreetChestnut HillMA02467
96 Derby Street Suite 300HinghamMA02043
82 Providence HighwayEast WalpoleMA2032
395 Route 3 EastCliftonNJ07014
55 Parsonage RoadEdisonNJ08837
2134 State Highway 35HolmdelNJ07733
4831 US Hwy 9HowellNJ07731
23-80 Bell Blvd.BaysideNY11360
176-60 Union TurnpikeFresh MeadowsNY11366
1542 Northern BlvdManhassetNY11030
160 E 54th Street (Citicorp)New YorkNY10022
2289 BroadwayNew YorkNY10024
33 East 17th Street (Union Square)New YorkNY10003
555 Fifth AveNew YorkNY10017
2245 Richmond AvenueStaten IslandNY10314
230 Main StWhite PlainsNY10601
97 Warren StreetNew YorkNY10007
100 West Bridge StreetHomesteadPA15120
800 Settlers Ridge Center DrivePittsburghPA15205
1311 West Main RoadMiddletonRI02842
371 Putnam Pike Suite 330SmithfieldRI02917
1350-B Bald Hill RdWarwickRI02886

Protect Your Account


If you have recently made a purchase at one of the affected stores, it is recommended that you:

  • Closely review your billing statements for any unauthorized charges.

  • Change the PIN number for your debit card if it was used during payment.

  • Immediately notify your bank if you notice any unauthorized purchased and/or withdrawls.


Additional information can be found on www.barnesandnobleinc.com or by calling 1-888-471-7809 (8AM – 8PM EST). The related press release can be seen here.

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

Monday, October 22, 2012

Cybercriminals Use cPanel Spam to Phish for Website FTP Credentials

cPanelPop quiz!

Let’s say that you get an email saying that your cPanel account may have been compromised and you need to sign into your FTP account to initiate a “security check” on it.

The email says it’s from “cPanel Inc,” has the cPanel logo, has a link that leads you to believe it points to the cPanel website, and warns that your domain may be suspended if you fail to respond within 2 business days.

Check it out:

cPanel Phishing Email
Screenshot Credit: Barracuda Labs



From: cPanel Inc
Subject: Your Messages

cPanel

cPanel Message Center

Dear Customer

Due to our security upgrade to avoid multiple login and an unauthorized access to your online cPanel and FTP account we do require you to sign in your domain name and username and password for security check on your account and afterward we shall send a security code to your email as part of confirmation that your domain has now been properly verified and secured.

To process to confirm and verify your domain for this security check please click
http://www.cpanel.net/login
Failure to confirm your domain within 2 business days may lead to suspension of your domain if we observe any unauthorized login and may lead to total removal of the domain name from our system.

Cpanel Management

Now, should you:

  1. Follow the instructions, click the embedded link and login to your account.

  2. Open a browser window, manually access your website control panel and check for any security alerts.


If your answer was “A” then I have some bad news: you just fell for a phishing scam. Now would be a good time to change your website credentials, if you’re still able to.

What happened?


The link provided in the email leads to a (compromised) third-party website touting a fake cPanel login page.  Any credentials supplied will be sent off to the cybercriminals, and they can use that information to hijack your website and setup drive-by-downloads, phishing pages or whatever else their little black hear desires.

It is important to note that if something suspicious was going on with your account, you’d likely get an email from your web hosting company, not cPanel.

That being said, if you happen to receive an email like the one shown above, be sure that you mouseover any links to check the destination URL first, or skip any possibility of following a malicious link by manually typing in the web address you want to visit instead.

[via Barracuda Labs]

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

Friday, October 19, 2012

Buy of the Week: HP Compaq 6005 Pro (SFF) for $590!

This offer expired on 10/26/12. Refer to top banner ad for active deals.

HP Compaq 6005 Pro SFFPacked with high performance features, the HP Compaq 6005 Pro Business PC is energy efficient and well equipped to go beyond meeting your daily business demands.

Until October 26th, 2012, you can order an HP Compaq 6005 Pro from Hyphenet for only $590, plus shipping!

Specifications for HP Compaq 6005 Pro (SFF)













































MFR#:A7L17UT#ABA
ProcessorAMD Athlon II X2 B26 / 3.2 GHz ( Dual-Core )
RAM4 GB DDR3
Hard Drive250 GB (7200 RPM)
Optical DriveDVD±RW (±R DL) / DVD-RAM
GraphicsATI Radeon HD 4200 shared video memory (UMA)
AudioIntegrated Stereo
NetworkingEthernet,
Fast Ethernet,
Gigabit Ethernet
Operating SystemMicrosoft Windows 7 Professional
Warranty3-Year On-site HP Warranty

Don't miss out on this Buy of the Week! Call (619) 325-0990 to order HP Compaq 6005 Pro (SFF) today!


Buy of the Week offer valid through October 26th, 2012.

Note: Shipping and taxes apply.

Looking for something else? Check out our monthly deals or contact us to get a quote on the product you're searching for.
This offer expired on 10/26/12. Refer to top banner ad for active deals.